Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
87
security advisorydenial of servicecode executionDebian: DSA-5110-1 Critical Issue: Exploitation of libxml2 Vulnerability
Multiple vulnerabilities have been discovered in the freeware Advanced Audio Decoder, which may result in denial of service or potentially the execution of arbitrary code if malformed media files are processed. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5109-1
Mar 27, 2022
•Critical
Debian
197
security advisorycode executiondebianDebian 9 Stretch DLA-2792-1 Critical: Faad2 Heap Vulnerabilities and Risks
Several issues have been found in faad2, a freeware Advanced Audio Decoder player. They are related to heap buffer overflows or null pointer dereferences, which both might allow an attacker to execute code by . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2792-1
Oct 24, 2021
•Critical
Debian LTS
87
security advisorydenial of serviceremote code executionDebian: DSA-4522-1 Critical: faad2 Denial of Service Issues
Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder. These vulnerabilities might allow remote attackers to cause denial-of-service, or potentially execute arbitrary code if crafted MPEG AAC files are processed. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4522-1
Sep 15, 2019
•Critical
Debian
197
security advisorydenial of servicebuffer overflowDebian LTS DLA-1899-1 Moderate: faad2 Denial Of Service
Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder: CVE-2018-19502 . Package : faad2 Version : 2.7-8+deb8u3 CVE ID : CVE-2018-19502 CVE-2018-20196 CVE-2018-20199 CVE-2018-20360 CVE-2019-6956 CVE-2019-15296 Debian Bug : 914641 Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder: CVE-2018-19502 Heap buffer overflow in the function excluded_channels (libfaad/syntax.c). This vulnerability might allow remote attackers to cause denial of service via crafted MPEG AAC data. CVE-2018-20196 Stack buffer overflow in the function calculate_gain (libfaad/br_hfadj.c). This vulnerability might allow remote attackers to cause denial of service or any unspecified impact via crafted MPEG AAC data. CVE-2018-20199 CVE-2018-20360 NULL pointer dereference in the function ifilter_bank (libfaad/filtbank.c). This vulnerability might allow remote attackers to cause denial of service via crafted MPEG AAC data. CVE-2019-6956 Global buffer overflow in the function ps_mix_phase (libfaad/ps_dec.c). This vulnerability might allow remote attackers to cause denial of service or any other unspecified impact via crafted MPEG AAC data. CVE-2019-15296 Buffer overflow in the function faad_resetbits (libfaad/bits.c). This vulnerability might allow remote attackers to cause denial of service via crafted MPEG AAC data. For Debian 8 "Jessie", these problems have been fixed in version 2.7-8+deb8u3. We recommend that you upgrade your faad2 packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance faad2 to address a variety of security flaws affecting the integrity of audio data handling.. faad2, Debian, buffer overflow, remote attack, security advisory. . LinuxSecurity.com Team
Aug 28, 2019
Debian LTS
197
security advisorybuffer overflowdebianDebian 8: DLA-1791-1 Critical: Faad2 Buffer Overflow Issues
Multiple vulnerabilities have been found in faad2, the Freeware Advanced Audio Coder: CVE-2018-20194 . Package : faad2 Version : 2.7-8+deb8u2 CVE ID : CVE-2018-20194 CVE-2018-20197 CVE-2018-20198 CVE-2018-20362 Multiple vulnerabilities have been found in faad2, the Freeware Advanced Audio Coder: CVE-2018-20194 CVE-2018-20197 Improper handling of implicit channel mapping reconfiguration leads to multiple heap based buffer overflow issues. These flaws might be leveraged by remote attackers to cause DoS. CVE-2018-20198 CVE-2018-20362 Insufficient user input validation in the sbr_hfadj module leads to stack-based buffer underflow issues. These flaws might be leveraged by remote attackers to cause DoS or any other unspecified impact. For Debian 8 "Jessie", these problems have been fixed in version 2.7-8+deb8u2. We recommend that you upgrade your faad2 packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The recent faad2 patch for Debian 8 rectifies significant buffer overflow vulnerabilities, potentially enabling remote Denial of Service attacks.. Debian Security, Freeware Audio Coder, System Updates. . Severity: Critical. LinuxSecurity.com Team
May 19, 2019
•Critical
Debian LTS
197
security advisorydenial of serviceupdateDebian 7 DLA-1077-1 Critical: faad2 DoS Security Update
Various security issues were discovered in faad2, a fast audio decoder, that would allow remote attackers to cause a denial of service (application crash due to memory failures or large CPU consumption) via a crafted mp4 file. . Hash: SHA512 Package : faad2 Version : 2.7-8+deb7u1 CVE ID : CVE-2017-9218 CVE-2017-9219 CVE-2017-9220 CVE-2017-9221 CVE-2017-9222 CVE-2017-9223 CVE-2017-9253 CVE-2017-9254 CVE-2017-9255 CVE-2017-9256 CVE-2017-9257 Debian Bug : 867724 Various security issues were discovered in faad2, a fast audio decoder, that would allow remote attackers to cause a denial of service (application crash due to memory failures or large CPU consumption) via a crafted mp4 file. For Debian 7 "Wheezy", these problems have been fixed in version 2.7-8+deb7u1. We recommend that you upgrade your faad2 packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance faad2 to fortify your infrastructure against service disruption exploits resulting from malicious mp4 media files.. Debian LTS,faad2 update,audio decoder security,remote attack protection. . Severity: Critical. LinuxSecurity.com Team
Aug 30, 2017
•Critical
Debian LTS
91
security advisorygentoobuffer overflowGentoo: GLSA-200811-03 Normal: FAAD2 Buffer Overflow Threat
A buffer overflow in FAAD2 might lead to user-assisted execution of arbitrary code via an MP4 file.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200811-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: FAAD2: User-assisted execution of arbitrary code Date: November 09, 2008 Bugs: #238445 ID: 200811-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A buffer overflow in FAAD2 might lead to user-assisted execution of arbitrary code via an MP4 file. Background ========= FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/faad2 < 2.6.1-r2 > = 2.6.1-r2 Description ========== The ICST-ERCIS (Peking University) reported a heap-based buffer overflow in the decodeMP4file() function in frontend/main.c. Impact ===== A remote attacker could entice a user to open a specially crafted MPEG-4 (MP4) file in an application using FAAD2, possibly leading to the execution of arbitrary code. Workaround ========= There is no known workaround at this time. Resolution ========= All FAAD2 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-libs/faad2-2.6.1-r2" References ========= [ 1 ] CVE-2008-4201 https://www.cve.org/CVERecord?id=CVE-2008-4201 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200811-03 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Nov 09, 2008
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!